ENISA: In Infrastructure as a Service (IaaS), who is responsible for guest systems monitoring?

Under the ENISA IaaS shared responsibility model, the cloud provider is responsible for the physical infrastructure, hypervisor, and underlying networking. The customer controls the guest OS, applications, and all workloads running on top - therefore guest systems monitoring is entirely the customer's responsibility, not shared.

The Cloud Provider is responsible for monitoring the physical infrastructure and hypervisor layer, not the guest operating systems provisioned and managed by the customer.

Shared responsibility applies to certain layers in IaaS, but guest OS monitoring sits above the provider's management boundary and belongs solely to the customer.

The ISP provides network connectivity and has no role in monitoring cloud guest systems or any IaaS layer.

The Data Commissioner is a regulatory role with no operational responsibility for monitoring cloud infrastructure at any layer.